Relative Time Modifiers for _indextime
Relative Time Modifiers for _indextime in 5.0+ tl;dr? Skip to the end for the syntax and save the details for later, as well as never. Verily, I remember not where I was when _indextime was added to...
View Articleindex gets invited to license_usage.log party in Splunk 6.0
In my presentation at .Conf 2013, I revealed to the audience a largely unheralded but hugely beneficial feature that ships with Splunk 6.0: index is now tracked by the license master in Splunk 6.0 and...
View Article
More Pages to Explore .....
